MENU
An engineer is configuring a Cisco Secure Firewall Threat Defense device and warns to create a new intrusion rule based on the detection of a specific pattern in the data payload for a new zero-day exploit. Which keyword type must be used to add a Line that identifies the author of the rule and the date it was created?
Suggested Answer: A
Get Premium 300-710 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
When creating a new intrusion rule in a Cisco Secure Firewall Threat Defense (FTD) device, the keyword type 'metadata' must be used to add a line that identifies the author of the rule and the date it was created. The metadata keyword is used to store additional information about the rule, such as authorship and creation date.
Steps:
In FMC, navigate to Policies > Intrusion > Rules.
Create a new rule or edit an existing one.
Use the 'metadata' keyword to add information about the author and date.
Example:
metadata: created_at 2023-06-15, author 'John Doe';
By using the metadata keyword, you ensure that the rule contains relevant information for tracking its creation and authorship, which is essential for maintaining rule documentation and accountability.
40 comments · newest first
LU
Luke
11 months ago
Just to clarify, metadata is the right choice here, right?
AI
Aileen
11 months ago
Surprised it's not gtp_info, that seemed relevant too.
MA
Margarita
11 months ago
No way, I thought it was content!
CL
Clare
11 months ago
I thought it was reference at first, but yeah, metadata makes sense.
JE
Jeannetta
12 months ago
Definitely metadata! That's how you track authorship.
AU
Audry
12 months ago
I practiced a similar question, and I think "metadata" is definitely the one that includes the author and date details.
SH
Shenika
1 year ago
I feel like "reference" might be related to documentation or sources, but it doesn't seem right for author info.
GL
Glendora
1 year ago
I'm not entirely sure, but I remember something about "content" being used for specific patterns in payloads.
GE
Gerald
1 year ago
I think the keyword we're looking for is "metadata" since it usually contains information about the rule's author and creation date.
MA
Marylin
1 year ago
This is a good question. Based on the information provided, I think the keyword type I need to use is metadata. That's typically used for adding metadata or additional information about the rule, like the author and creation date. I feel pretty confident about this one.
DA
Darci
1 year ago
I'm a bit confused by this question. The options seem pretty similar, and I'm not totally sure which one is the right keyword type to use. I'll have to review the Cisco Secure Firewall Threat Defense documentation to make sure I understand this properly.
AL
Allene
1 year ago
Okay, I've got this. The question is specifically asking about adding a line to identify the author and date of the intrusion rule, so the keyword type I need to use is metadata. That makes the most sense to me.
CE
Ceola
1 year ago
Hmm, I'm a little unsure about this one. The question is asking about adding a line to identify the author and date, so I'm not sure if content or reference would be more appropriate. I'll have to think this through carefully.
FR
France
1 year ago
This looks like a pretty straightforward question about configuring a Cisco Secure Firewall Threat Defense device. I think the keyword type I need to use is metadata, since that's typically used to provide information about the rule itself, like the author and creation date.
AR
Aretha
1 year ago
This seems pretty straightforward. I think the answer is A - both reducing expenses and increasing controllable investment can increase ROI.
AM
Amos
2 years ago
Metadata? More like 'meta-data', am I right? *wink wink* Anyway, A is the way to go.
BE
Becky
2 years ago
Yes, A) metadata is the correct choice
TA
Tarra
2 years ago
Definitely A) metadata
TI
Tina
2 years ago
A) metadata
TE
Teddy
2 years ago
Hmm, metadata sounds right, but maybe they're trying to trick us. Better double-check the docs just in case.
MO
Monte
2 years ago
No, I'm pretty sure it's metadata. Let's go with that.
HI
Hillary
2 years ago
C) reference
MA
Marge
2 years ago
I think it's metadata too, let's check the docs to be sure.
AN
An
2 years ago
A) metadata
NA
Narcisa
2 years ago
I'm not sure, but I think metadata makes sense for adding that information to the rule.
MA
Margurite
2 years ago
C'mon, who doesn't know that metadata is the way to go for rule authorship details? Easy peasy!
BO
Bobbye
2 years ago
D) gtp_info
DE
Deeann
2 years ago
C) reference
PU
Pura
2 years ago
B) content
AL
Alaine
2 years ago
A) metadata
LI
Lisbeth
2 years ago
I agree with Jani, using metadata would help identify the author and creation date of the rule.
RE
Ressie
2 years ago
Definitely A. The metadata keyword is perfect for this kind of metadata about the rule itself.
AL
Alease
2 years ago
No, I think metadata is more appropriate in this case.
ED
Edelmira
2 years ago
C) reference
DE
Deandrea
2 years ago
I agree, metadata is the way to go.
SO
Solange
2 years ago
A) metadata
JA
Jani
2 years ago
I think the keyword type that must be used is metadata.
TO
Tonja
2 years ago
A) metadata is the correct answer. I've used this keyword to add author and date info in my firewall rules before.
AN
Antonio
2 years ago
B) content
DE
Dewitt
2 years ago
A) metadata